Coder Social home page Coder Social logo

aircrack-ng / aircrack-ng-archive Goto Github PK

View Code? Open in Web Editor NEW
850.0 850.0 309.0 11.28 MB

Pre-migration repository. New repository ➙

Home Page: https://github.com/aircrack-ng/aircrack-ng

License: GNU General Public License v2.0

Makefile 1.53% C 75.64% Shell 2.17% C# 6.63% Python 3.56% C++ 0.35% Assembly 0.66% Objective-C 0.32% Roff 2.65% M4 6.50%

aircrack-ng-archive's Introduction

Aircrack-ng

Badges

GitHub CI

Alma Linux CI Alpine Linux DragonFlyBSD CI FreeBSD CI Gentoo CI Kali Linux CI Linux CI Linux PCRE CI macOS CI NetBSD CI OpenBSD CI Windows CI

Others

Clang Scan-build Codespell Coverity Scan Docker (git) push to DockerHub Markdown link PVS-Studio Analysis Style & Consistency

Repository versions

Arch Linux package Debian package Debian package Docker Image Version (latest by date) Fedora package homebrew version Ubuntu package Ubuntu package Ubuntu package Ubuntu package Ubuntu package Ubuntu package Ubuntu package

Description

Aircrack-ng is a complete suite of tools to assess WiFi network security.

It focuses on different areas of WiFi security:

  • Monitoring: Packet capture and export of data to text files for further processing by third party tools.
  • Attacking: Replay attacks, deauthentication, fake access points and others via packet injection.
  • Testing: Checking WiFi cards and driver capabilities (capture and injection).
  • Cracking: WEP and WPA PSK (WPA 1 and 2).

All tools are command line which allows for heavy scripting. A lot of GUIs have taken advantage of this feature. It works primarily on Linux but also Windows, macOS, FreeBSD, OpenBSD, NetBSD, as well as Solaris and even eComStation 2.

Building

Requirements

  • Autoconf
  • Automake
  • Libtool
  • shtool
  • OpenSSL development package or libgcrypt development package.
  • Airmon-ng (Linux) requires ethtool, usbutils, and often pciutils.
  • On Windows, cygwin has to be used and it also requires w32api package.
  • On Windows, if using clang, libiconv and libiconv-devel
  • Linux: LibNetlink 1 or 3. It can be disabled by passing --disable-libnl to configure.
  • pkg-config (pkgconf on FreeBSD, DragonFlyBSD, OpenBSD and NetBSD)
  • FreeBSD, DragonFlyBSD, OpenBSD, NetBSD, Solaris and OS X with Macports: gmake
  • Linux/Cygwin: make and Standard C++ Library development package (Debian: libstdc++-dev)

Note: Airmon-ng only requires pciutils if the system has a PCI/PCIe bus and it is populated. Such bus can be present even if not physically visible. For example, it is present, and populated on the Raspberry Pi 4, therefore pciutils is required on that device.

Optional stuff

  • If you want SSID filtering with regular expression in airodump-ng (--essid-regex) PCRE or PCRE2 development package is required.
  • If you want to use airolib-ng and '-r' option in aircrack-ng, SQLite development package >= 3.3.17 (3.6.X version or better is recommended)
  • If you want to use Airpcap, the 'developer' directory from the CD/ISO/SDK is required.
  • In order to build besside-ng, besside-ng-crawler, easside-ng, tkiptun-ng and wesside-ng, libpcap development package is required (on Cygwin, use the Airpcap SDK instead; see above)
  • rfkill
  • If you want Airodump-ng to log GPS coordinates, gpsd is needed
  • For best performance on SMP machines, ensure the hwloc library and headers are installed. It is strongly recommended on high core count systems, it may give a serious speed boost
  • CMocka and expect for testing
  • For integration testing on Linux only: tcpdump, HostAPd, WPA Supplicant and screen

Installing required and optional dependencies

Below are instructions for installing the basic requirements to build aircrack-ng for a number of operating systems.

Note: CMocka, tcpdump, screen, HostAPd and WPA Supplicant should not be dependencies when packaging Aircrack-ng.

Linux

Arch Linux

sudo pacman -Sy base-devel libnl openssl ethtool util-linux zlib libpcap sqlite pcre2 hwloc cmocka hostapd wpa_supplicant tcpdump screen iw usbutils pciutils expect

Debian/Ubuntu

sudo apt-get install build-essential autoconf automake libtool pkg-config libnl-3-dev libnl-genl-3-dev libssl-dev ethtool shtool rfkill zlib1g-dev libpcap-dev libsqlite3-dev libpcre2-dev libhwloc-dev libcmocka-dev hostapd wpasupplicant tcpdump screen iw usbutils expect

Fedora

sudo yum install libtool pkgconfig sqlite-devel autoconf automake openssl-devel libpcap-devel pcre2-devel rfkill libnl3-devel gcc gcc-c++ ethtool hwloc-devel libcmocka-devel make file expect hostapd wpa_supplicant iw usbutils tcpdump screen zlib-devel expect

CentOS/RHEL 7

sudo yum install epel-release
sudo ./centos_autotools.sh
# Remove older installation of automake/autoconf
sudo yum remove autoconf automake
sudo yum install sqlite-devel openssl-devel libpcap-devel pcre2-devel rfkill libnl3-devel ethtool hwloc-devel libcmocka-devel make file expect hostapd wpa_supplicant iw usbutils tcpdump screen zlib-devel

Note: autoconf, automake, libtool, and pkgconfig in the repositories are too old. The script centos_autotools.sh automatically installs dependencies to compile then install the tools.

CentOS/RHEL 8

sudo yum config-manager --set-enabled powertools
sudo yum install epel-release
sudo yum install libtool pkgconfig sqlite-devel autoconf automake openssl-devel libpcap-devel pcre2-devel rfkill libnl3-devel gcc gcc-c++ ethtool hwloc-devel libcmocka-devel make file expect hostapd wpa_supplicant iw usbutils tcpdump screen zlib-devel

openSUSE

sudo zypper install autoconf automake libtool pkg-config libnl3-devel libopenssl-1_1-devel zlib-devel libpcap-devel sqlite3-devel pcre2-devel hwloc-devel libcmocka-devel hostapd wpa_supplicant tcpdump screen iw gcc-c++ gcc ethtool pciutils usbutils expect

Mageia

sudo urpmi autoconf automake libtool pkgconfig libnl3-devel libopenssl-devel zlib-devel libpcap-devel sqlite3-devel pcre2-devel hwloc-devel libcmocka-devel hostapd wpa_supplicant tcpdump screen iw gcc-c++ gcc make expect

Alpine

sudo apk add gcc g++ make autoconf automake libtool libnl3-dev openssl-dev ethtool libpcap-dev cmocka-dev hostapd wpa_supplicant tcpdump screen iw pkgconf util-linux sqlite-dev pcre2-dev linux-headers zlib-dev pciutils usbutils expect

Note: Community repository needs to be enabled for iw

Clear Linux

sudo swupd bundle-add c-basic devpkg-openssl devpkg-libgcrypt devpkg-libnl devpkg-hwloc devpkg-libpcap devpkg-pcre2 devpkg-sqlite-autoconf ethtool wget network-basic software-testing sysadmin-basic wpa_supplicant os-testsuite

Note: hostapd must be compiled manually, it is not present in the repository

BSD

FreeBSD

pkg install pkgconf shtool libtool gcc9 automake autoconf pcre2 sqlite3 openssl gmake hwloc cmocka

DragonflyBSD

pkg install pkgconf shtool libtool gcc8 automake autoconf pcre2 sqlite3 libgcrypt gmake cmocka

OpenBSD

pkg_add pkgconf shtool libtool gcc automake autoconf pcre2 sqlite3 openssl gmake cmocka

NetBSD

pkg_add pkgconf libtool gcc7 automake autoconf pcre2 sqlite3 openssl gmake cmocka

macOS

XCode, Xcode command line tools and HomeBrew are required.

brew install autoconf automake libtool openssl shtool pkg-config hwloc pcre2 sqlite3 libpcap cmocka

Windows

Cygwin

Cygwin requires the full path to the setup.exe utility, in order to automate the installation of the necessary packages. In addition, it requires the location of your installation, a path to the cached packages download location, and a mirror URL.

An example of automatically installing all the dependencies is as follows:

c:\cygwin\setup-x86.exe -qnNdO -R C:/cygwin -s http://cygwin.mirror.constant.com -l C:/cygwin/var/cache/setup -P autoconf -P automake -P bison -P gcc-core -P gcc-g++ -P mingw-runtime -P mingw-binutils -P mingw-gcc-core -P mingw-gcc-g++ -P mingw-pthreads -P mingw-w32api -P libtool -P make -P python -P gettext-devel -P gettext -P intltool -P libiconv -P pkg-config -P git -P wget -P curl -P libpcre2-devel -P libssl-devel -P libsqlite3-devel

MSYS2

pacman -Sy autoconf automake-wrapper libtool msys2-w32api-headers msys2-w32api-runtime gcc pkg-config git python openssl-devel openssl libopenssl msys2-runtime-devel gcc binutils make pcre2-devel libsqlite-devel

GNU/Hurd

Debian

apt-get install build-essential autoconf automake libtool pkg-config libssl-dev shtool zlib1g-dev libpcap-dev libsqlite3-dev libpcre2-dev libhwloc-dev libcmocka-dev screen expect libbsd-dev

Docker containers

We have two repositories on DockerHub:

Base command for the git version:

sudo docker run --rm -it aircrackng/git

Available platforms/CPU architectures:

  • linux/386 (base image: debian:unstable-slim)
  • linux/amd64 (base image: debian:unstable-slim)
  • linux/arm/v5 (base image: debian:unstable-slim)
  • linux/arm/v6 (base image: alpine:3)
  • linux/arm/v7 (base image: debian:unstable-slim)
  • linux/arm64/v8 (base image: debian:unstable-slim)
  • linux/mips64le (base image: debian:unstable-slim)
  • linux/ppc64le (base image: debian:unstable-slim)
  • linux/riscv64 (base image: debian:unstable-slim)
  • linux/s390x (base image: debian:unstable-slim)

Compiling

To build aircrack-ng, the Autotools build system is utilized. Autotools replaces the older method of compilation.

NOTE: If utilizing a developer version, eg: one checked out from source control, you will need to run a pre-configure script. The script to use is one of the following: autoreconf -i or env NOCONFIGURE=1 ./autogen.sh.

First, ./configure the project for building with the appropriate options specified for your environment:

./configure <options>

TIP: If the above fails, please see above about developer source control versions.

Next, compile the project (respecting if make or gmake is needed):

  • Compilation:

    make

  • Compilation on *BSD or Solaris:

    gmake

Finally, the additional targets listed below may be of use in your environment:

  • Execute all unit testing:

    make check

  • Execute all integration testing (requires root):

    make integration

  • Installing:

    make install

  • Uninstall:

    make uninstall

./configure flags

When configuring, the following flags can be used and combined to adjust the suite to your choosing:

  • with-airpcap=DIR: needed for supporting airpcap devices on Windows (Cygwin or MSYS2 only). Replace DIR above with the absolute location to the root of the extracted source code from the Airpcap CD or downloaded SDK available online. Required on Windows to build besside-ng, besside-ng-crawler, easside-ng, tkiptun-ng and wesside-ng when building experimental tools. The developer pack (Compatible with version 4.1.1 and 4.1.3) can be downloaded at https://support.riverbed.com/content/support/software/steelcentral-npm/airpcap.html

  • with-experimental: needed to compile tkiptun-ng, easside-ng, buddy-ng, buddy-ng-crawler, airventriloquist and wesside-ng. libpcap development package is also required to compile most of the tools. If not present, not all experimental tools will be built. On Cygwin, libpcap is not present and the Airpcap SDK replaces it. See --with-airpcap option above.

  • with-ext-scripts: needed to build airoscript-ng, versuck-ng, airgraph-ng and airdrop-ng. Note: Each script has its own dependencies.

  • with-gcrypt: Use libgcrypt crypto library instead of the default OpenSSL. And also use internal fast sha1 implementation (borrowed from GIT). Dependency (Debian): libgcrypt20-dev

  • with-duma: Compile with DUMA support. DUMA is a library to detect buffer overruns and underruns. Dependency (Debian): duma

  • disable-libnl: Set up the project to be compiled without libnl (1 or 3). Linux option only.

  • without-opt: Do not enable -O3 optimizations.

  • enable-shared: Make OSdep a shared library.

  • disable-shared: When combined with enable-static, it will statically compile Aircrack-ng.

  • with-avx512: On x86, add support for AVX512 instructions in aircrack-ng. Only use it when the current CPU supports AVX512.

  • with-static-simd=: Compile a single optimization in aircrack-ng binary. Useful when compiling statically and/or for space-constrained devices. Valid SIMD options: x86-sse2, x86-avx, x86-avx2, x86-avx512, ppc-altivec, ppc-power8, arm-neon, arm-asimd. Must be used with --enable-static --disable-shared. When using those 2 options, the default is to compile the generic optimization in the binary. --with-static-simd merely allows to choose another one.

  • enable-maintainer-mode: It is important to enable this flag when developing with Aircrack-ng. This flag enables additional compile warnings and safety features.

Examples:

  • Configure and compiling:

    ./configure --with-experimental
    make
    
  • Compiling with gcrypt:

    ./configure --with-gcrypt
    make
    
  • Installing:

    make install

  • Installing (strip binaries):

    make install-strip

  • Installing, with external scripts:

    ./configure --with-experimental --with-ext-scripts
    make
    make install
    
  • Testing (with sqlite, experimental and pcre2)

    ./configure --with-experimental
    make
    make check
    
  • Compiling on OS X with macports (and all options):

    ./configure --with-experimental
    gmake
    
  • Compiling on macOS running on M1/AARCH64 and Homebrew:

    autoreconf -vif
    env CPPFLAGS="-Wno-deprecated-declarations" ./configure --with-experimental
    make
    make check
    
  • Compiling on OS X 10.10 with XCode 7.1 and Homebrew:

    env CC=gcc-4.9 CXX=g++-4.9 ./configure
    make
    make check
    

    NOTE: Older XCode ships with a version of LLVM that does not support CPU feature detection; which causes the ./configure to fail. To work around this older LLVM, it is required that a different compile suite is used, such as GCC or a newer LLVM from Homebrew.

    If you wish to use OpenSSL from Homebrew, you may need to specify the location to its installation. To figure out where OpenSSL lives, run:

    brew --prefix openssl

    Use the output above as the DIR for --with-openssl=DIR in the ./configure line:

    env CC=gcc-4.9 CXX=g++-4.9 ./configure --with-openssl=DIR
    make
    make check
    
  • Compiling on FreeBSD with gcc9

    env CC=gcc9 CXX=g++9 MAKE=gmake ./configure
    gmake
    
  • Compiling on Cygwin with Airpcap (assuming Airpcap devpack is unpacked in Aircrack-ng directory)

    cp -vfp Airpcap_Devpack/bin/x86/airpcap.dll src
    cp -vfp Airpcap_Devpack/bin/x86/airpcap.dll src/aircrack-osdep
    cp -vfp Airpcap_Devpack/bin/x86/airpcap.dll src/aircrack-crypto
    cp -vfp Airpcap_Devpack/bin/x86/airpcap.dll src/aircrack-util
    dlltool -D Airpcap_Devpack/bin/x86/airpcap.dll -d build/airpcap.dll.def -l Airpcap_Devpack/bin/x86/libairpcap.dll.a
    autoreconf -i
    ./configure --with-experimental --with-airpcap=$(pwd)
    make
    
  • Compiling on DragonflyBSD with gcrypt using GCC 8

    autoreconf -i
    env CC=gcc8 CXX=g++8 MAKE=gmake ./configure --with-experimental --with-gcrypt
    gmake
    
  • Compiling on OpenBSD (with autoconf 2.69 and automake 1.16)

    export AUTOCONF_VERSION=2.69
    export AUTOMAKE_VERSION=1.16
    autoreconf -i
    env MAKE=gmake CC=cc CXX=c++ ./configure
    gmake
    
  • Compiling and debugging aircrack-ng

    export CFLAGS='-O0 -g'
    export CXXFLAGS='-O0 -g'
    ./configure --with-experimental --enable-maintainer-mode --without-opt
    make
    LD_LIBRARY_PATH=.libs gdb --args ./aircrack-ng [PARAMETERS]
    

IDE development

VS Code - devcontainers

A VS Code development environment is provided, as is, for rapid setup of a development environment. This additionally adds support for GitHub Codespaces.

Requirements

The first requirement is a working Docker Engine environment.

Next, an installation of VS Code with the following extension(s):

The "Remote - Containers" extension will refuse to work with OSS Code.

Usage

  1. Clone this repository to your working folder:
$ git clone --recursive https://github.com/aircrack-ng/aircrack-ng.git
$ cd aircrack-ng
  1. After cloning this repository, open the folder inside VS Code.
$ code .

IMPORTANT: You should answer "Yes", if it asks if the folder should be opened inside a remote container. If it does not ask, then press Ctrl+Shift+P and type open in container. This should bring up the correct command, for which pressing enter will run said command.

  1. A number of warnings might appear about a missing compile_commands.json file. These are safe to ignore for a moment, as this file is automatically generated after the initial compilation.
  2. Now build the entire project by pressing Ctrl+R and selecting Build Full from the pop-up menu that appears.
  3. VS Code should detect the compile_commands.json file and ask if it should be used; selecting "Yes, always" will complete the initial setup of a fully working IDE.

IMPORTANT: If it doesn't detect the file, pressing Ctrl+Shift+P and typing reload window will bring up the selection to fully reload the environment.

  1. At this point, nearly all features of VS Code will function; from Intellisense, auto-completion, live documentation, to code formatting. Additionally, there are pre-configured tasks for builds and tests, as well as an example GDB/LLDB configuration for debugging aircrack-ng.

Packaging

Automatic detection of CPU optimization is done at run time. This behavior is desirable when packaging Aircrack-ng (for a Linux or other distribution.)

Also, in some cases it may be desired to provide your own flags completely and not having the suite auto-detect a number of optimizations. To do this, add the additional flag --without-opt to the ./configure line:

./configure --without-opt

Using pre-compiled binaries

Linux/BSD

Aircrack-ng is available in most distributions repositories. However, it is not always up-to-date.

Windows

  • Install the appropriate "monitor" driver for your card; standard drivers don't work for capturing data.
  • Aircrack-ng suite is command line tools. So, you have to open a command-line Start menu -> Run... -> cmd.exe then use them
  • Run the executables without any parameters to have help

Documentation

Some more information is present in the README file.

Documentation, tutorials, ... can be found on https://aircrack-ng.org

Support is available in the GitHub Discussions and on IRC (in #aircrack-ng on Libera Chat).

Every tool has its own manpage. For aircrack-ng, man aircrack-ng

Infrastructure sponsors

aircrack-ng-archive's People

Contributors

clopez avatar daouid avatar googulator avatar jbenden avatar mister-x- avatar xayon avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

aircrack-ng-archive's Issues

airodump-ng Interfaces Windows

Using a awus036h adapter on windows 10 with the command
airodump-ng --bssid xx:xx:xx:xx:xx:x "Wi-Fi 2"
I am receiving the error
Adapter <Wi-Fi 2> not supported
However on aircrack's interface docs (here) it says

The Alfa AWUS036H is a very popular card with this chipset and it performs well the aircrack-ng suite.

What am I doing wrong?

aircrack-ng failed on osx

when i run the command: gmake macport=true sqlite=true experimental=true pcre=true

the make process failed.
./crypto.h:43:10: fatal error: 'openssl/hmac.h' file not found

airmon-ng does not support busypox ps

When running airmon-ng on a system such as openwrt that does not use ps from util-linux, errors like these appear:

ps: unrecognized option: A
BusyBox v1.24.2 () multi-call binary.

Usage: ps

Show list of processes

w   Wide output

ps: unrecognized option: a
BusyBox v1.24.2 () multi-call binary.

Usage: ps

Show list of processes

w   Wide output

ps: unrecognized option: a
BusyBox v1.24.2 () multi-call binary.

Usage: ps

Show list of processes

w   Wide output

Cannot change FreeRADIUS wpelogfile

When i set a log file path at radiusd.conf (variable 'wpelogfile'), it is ignored and the log file is created at /var/log. When looking at the patch code this seems to be hardcoded :(

besside-ng constantly terminates with "wi_read(): No child processes" on wifi adapters using the ath9k_htc driver

Currently I have the following 3 wireless adapters:
Alfa AWUS036NHA (Atheros Communications, Inc. AR9271 802.11n/driver ath9k_htc)
TP-LINK TL-WN722N (Atheros Communications, Inc. AR9271 802.11n/driver ath9k_htc)
Alfa AWUS036H V5 (Realtek Semiconductor Corp. RTL8187/driver rtl8187)

I'm running latest Archlinux on Beaglebone Black/Raspberry PI 1 model B and I have a Kali 2 VM as well and aircrack-ng compiled from the latest source code fetched from here.

besside-ng works without issues on the Alfa with the Realtek chipset, however it constantly crashes (random interval of time) with the error "wi_read(): No child processes" with both of the Atheros adapters using the ath9k_htc driver:

[root@black b]# besside-ng whitemon
[13:36:50] Let's ride
[13:36:50] Resuming from besside.log
[13:36:50] Appending to wpa.cap
[13:36:50] Appending to wep.cap
[13:36:50] Logging to besside.log
besside-ng: wi_read(): No child processes
[root@black b]# besside-ng whitemon
[13:36:52] Let's ride
[13:36:52] Resuming from besside.log
[13:36:52] Appending to wpa.cap
[13:36:52] Appending to wep.cap
[13:36:52] Logging to besside.log
[13:37:00] TO-OWN [network names scrubbed] OWNED []
besside-ng: wi_read(): No child processes
[root@black b]#

mips compilation

Trying latest trunk with openwrt, mips arch. Currently it cries about missing ieee80211_channel_to_frequency(int chan) definition. Digging it a bit showed for some reason mips was excluded here:
https://github.com/aircrack-ng/aircrack-ng/blob/master/src/osdep/linux.c#L933
If I remove && !defined(mips) part compilation goes OK.
Also I needed to patch aircrack-ng.h to include pthread.h like this:

--- a/src/aircrack-ng.h 2015-12-30 07:42:32.000000000 +0200
+++ b/src/aircrack-ng.h 2015-12-30 12:57:13.162931471 +0200
@@ -44,7 +44,7 @@
 #include "aircrack-ptw-lib.h"
 #include "eapol.h"

-#if defined(__OpenBSD__) || defined(__APPLE__)
+#if defined(__OpenBSD__) || defined(__APPLE__) || defined(__mips__)
    #include <pthread.h>
 #endif

Still with Atheros AR9331 I hit bug #48.

aireplay-ng dosen't wait 3 seconds (loop)

Hi,

I try to authenticate with an Lancom L-54g AP that has WEP on and aireplay dosen't wait 3 seconds after an disassociation packet. It floods the target AP with several requests in one second:

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]
08:40:45  Association successful :-) (AID: 1)

08:40:45  Got a disassociation packet! (Waiting 3 seconds)

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]
08:40:45  Association successful :-) (AID: 1)

08:40:45  Got a disassociation packet! (Waiting 3 seconds)

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]
08:40:45  Association successful :-) (AID: 1)

08:40:45  Got a disassociation packet! (Waiting 3 seconds)

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]
08:40:45  Association successful :-) (AID: 1)

08:40:45  Got a disassociation packet! (Waiting 3 seconds)

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]
08:40:45  Association successful :-) (AID: 1)

08:40:45  Got a disassociation packet! (Waiting 3 seconds)

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]
08:40:45  Association successful :-) (AID: 1)

08:40:45  Got a disassociation packet! (Waiting 3 seconds)

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]
08:40:45  Association successful :-) (AID: 1)

08:40:45  Got a disassociation packet! (Waiting 3 seconds)

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]
08:40:45  Association successful :-) (AID: 1)

08:40:45  Got a disassociation packet! (Waiting 3 seconds)

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]
08:40:45  Association successful :-) (AID: 1)

08:40:45  Got a disassociation packet! (Waiting 3 seconds)

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]
08:40:45  Association successful :-) (AID: 1)

08:40:45  Got a disassociation packet! (Waiting 3 seconds)

08:40:45  Sending Authentication Request (Open System) [ACK]
08:40:45  Authentication successful
08:40:45  Sending Association Request [ACK]

08:40:50  Sending Authentication Request (Open System) [ACK]
08:40:50  Authentication successful
08:40:50  Sending Association Request [ACK]
08:40:50  Association successful :-) (AID: 1)

08:40:50  Got a disassociation packet! (Waiting 3 seconds)

08:40:50  Sending Authentication Request (Open System) [ACK]

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]
08:40:52  Authentication successful
08:40:52  Sending Association Request [ACK]
08:40:52  Association successful :-) (AID: 1)

08:40:52  Got a disassociation packet! (Waiting 3 seconds)

08:40:52  Sending Authentication Request (Open System) [ACK]^C

Card: Atheros AR9271 ath9k_htc/htc_9271-1.4.0.fw
System: Linux 4.4.3 x86_64
Command: aireplay-ng -1 10 -h 00:22:33:44:55:66 -x 10 -e somewlan wlp0s26u1u1mon
Target AP: 00:A0:57:XX:XX:XX Lancom L-54g

How to obtain the output of airodump?

I want to use airodump-ng to do wifi localization in real time, but I don't know how to obtain all the APs' information (eg. mac address and rssi) in my program.
Can anyone provide some help? Great thanks.

recent "header update" commits reintroduced non-portable types

basically undoing my work from aircrack-ng/aircrack-ng#7
28c4003 : u_long (needs to be unsigned long)
29b9e78 : u_int16_t u_int8_t (need to be uintXX_t without the first underscore and inclusion of stdint.h is needed)
etc:

$ for foo in char int long ; do find . -name '*[ch]' | xargs grep u_ | grep $foo ; done > merde
$ cat merde
./src/include/ethernet.h:   u_char  ether_dhost[ETHER_ADDR_LEN];
./src/include/ethernet.h:   u_char  ether_shost[ETHER_ADDR_LEN];
./src/include/ethernet.h:   u_char octet[ETHER_ADDR_LEN];
./src/include/ethernet.h:extern char *ether_sprintf(const u_int8_t *);
./src/include/if_arp.h: u_char  ar_hln;     /* length of hardware address */
./src/include/if_arp.h: u_char  ar_pln;     /* length of protocol address */
./src/include/if_arp.h: u_char  ar_sha[];   /* sender hardware address */
./src/include/if_arp.h: u_char  ar_spa[];   /* sender protocol address */
./src/include/if_arp.h: u_char  ar_tha[];   /* target hardware address */
./src/include/if_arp.h: u_char  ar_tpa[];   /* target protocol address */
./src/besside-ng-crawler.c:  u_char *bssid;
./src/besside-ng-crawler.c:  u_char beacon_saved;
./src/besside-ng-crawler.c:struct bsslist *is_in_list(struct bsslist *bsl, const u_char *bssid) {
./src/besside-ng-crawler.c:struct bsslist *add_to_list(struct bsslist *bsl, const u_char *bssid) {
./src/besside-ng-crawler.c:  const u_char *pkt, *llc, *bssid, *offset = NULL;
./src/besside-ng-crawler.c:  const u_char *pkt, *llc, *bssid, *offset = 0;
./src/besside-ng-crawler.c: pcap_dump((u_char *) dumper, &header, pkt + o);
./src/besside-ng-crawler.c:   pcap_dump((u_char *) dumper, &header, pkt + o);
./src/osdep/airpcap.c:int ppi_decode(const u_char *p, int caplen, int *hdrlen, int *power)
./src/easside-ng.c:      *((u_char *) & oddbyte) = *(u_char *) ptr;
./contrib/airpcap/airpcap.c:static int ppi_decode(const u_char *p, int caplen, int *hdrlen, int *power)
./patches/madwifi-ng-r4073.patch:   enum ieee80211_phymode mode, const u_int16_t freq[], int nfreq)
./patches/madwifi-ng-r4073.patch:   u_int modeflags;
./patches/madwifi-ng-r4073.patch:   u_int32_t flags)
./patches/rtl8187_2.6.27.patch:         cpu_to_le16(ieee->current_network.beacon_interval);
./patches/old/madwifi-cvs-20050814.patch:   u_int32_t ic_channelList[IEEE80211_CHAN_MAX];
./patches/old/rtl8187_2.6.22.patch:         cpu_to_le16(ieee->current_network.beacon_interval);
./patches/old/rtl8187_2.6.21v4.patch:       cpu_to_le16(ieee->current_network.beacon_interval);
./patches/old/rt2500-cvs-20051008-prismheader.patch:+   u_int32_t did;
./patches/old/rt2500-cvs-20051008-prismheader.patch:+   u_int16_t status;
./patches/old/rt2500-cvs-20051008-prismheader.patch:+   u_int16_t len;
./patches/old/rt2500-cvs-20051008-prismheader.patch:+   u_int32_t data;
./patches/old/rt2500-cvs-20051008-prismheader.patch:+   u_int32_t msgcode;
./patches/old/rt2500-cvs-20051008-prismheader.patch:+   u_int32_t msglen;
./patches/old/rt2500-cvs-20051008-prismheader.patch:+   u_int8_t devname[WLAN_DEVNAMELEN_MAX];
./patches/old/rtl8187_2.6.21v5.patch:       cpu_to_le16(ieee->current_network.beacon_interval);
./patches/old/rtl8187_2.6.20v4.patch:       cpu_to_le16(ieee->current_network.beacon_interval);
./patches/old/rtl8187_2.6.24v3.patch:       cpu_to_le16(ieee->current_network.beacon_interval);
./patches/old/rt2570-cvs-20051008-prismheader.patch:+   u_int32_t did;
./patches/old/rt2570-cvs-20051008-prismheader.patch:+   u_int16_t status;
./patches/old/rt2570-cvs-20051008-prismheader.patch:+   u_int16_t len;
./patches/old/rt2570-cvs-20051008-prismheader.patch:+   u_int32_t data;
./patches/old/rt2570-cvs-20051008-prismheader.patch:+   u_int32_t msgcode;
./patches/old/rt2570-cvs-20051008-prismheader.patch:+   u_int32_t msglen;
./patches/old/rt2570-cvs-20051008-prismheader.patch:+   u_int8_t devname[WLAN_DEVNAMELEN_MAX];
./patches/old/rtl8187_2.6.21v2.patch:       cpu_to_le16(ieee->current_network.beacon_interval);
./patches/old/rtl8187_2.6.24v2.patch:       cpu_to_le16(ieee->current_network.beacon_interval);
./patches/old/rtl8187_1025v2.patch:         cpu_to_le16(ieee->current_network.beacon_interval);
./patches/old/madwifi-cvs-20050707.patch:-  u_int8_t rix, txrate, ctsrate;
./patches/old/madwifi-cvs-20050707.patch:+  u_int8_t rix = 0, txrate, ctsrate;
./patches/old/madwifi-cvs-20050707.patch:   u_int8_t cix = 0xff;        /* NB: silence compiler */
./patches/old/rtl8187_2.6.24.patch:         cpu_to_le16(ieee->current_network.beacon_interval);
./patches/old/madwifi-ng-r1457-1473_disable_retry_raw.patch:    u_int16_t ic_txpowlimit;        /* global tx power limit */
./patches/old/madwifi-ng-r1457-1473_disable_retry_raw.patch:    u_int16_t ic_uapsdmaxtriggers;      /* max triggers that could arrive */
./patches/old/madwifi-ng-r1457-1473_disable_retry_raw.patch:    u_int8_t ic_coverageclass;      /* coverage class */
./patches/old/madwifi-ng-r1475_disable_retry_raw.patch:     u_int16_t ic_txpowlimit;        /* global tx power limit */
./patches/old/madwifi-ng-r1475_disable_retry_raw.patch:     u_int16_t ic_uapsdmaxtriggers;      /* max triggers that could arrive */
./patches/old/madwifi-ng-r1475_disable_retry_raw.patch:     u_int8_t ic_coverageclass;      /* coverage class */
./patches/rtl8187_2.6.35-monitor_only.patch:        cpu_to_le16(ieee->current_network.beacon_interval);
./src/include/ethernet.h:extern void ether_ifattach(struct ifnet *, const u_int8_t *);
./src/include/ethernet.h:extern int  ether_ioctl(struct ifnet *, u_long, caddr_t);
./src/include/ethernet.h:extern char *ether_sprintf(const u_int8_t *);
./src/include/ethernet.h:       void *, u_int);
./src/include/ieee80211.h:  u_int16_t   i_sfd;
./src/include/ieee80211.h:  u_int8_t    i_signal;
./src/include/ieee80211.h:  u_int8_t    i_service;
./src/include/ieee80211.h:  u_int16_t   i_length;
./src/include/ieee80211.h:  u_int16_t   i_crc;
./src/include/ieee80211.h:  u_int8_t    i_fc[2];
./src/include/ieee80211.h:  u_int8_t    i_dur[2];
./src/include/ieee80211.h:  u_int8_t    i_addr1[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_addr2[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_addr3[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_seq[2];
./src/include/ieee80211.h:  u_int8_t    i_fc[2];
./src/include/ieee80211.h:  u_int8_t    i_dur[2];
./src/include/ieee80211.h:  u_int8_t    i_addr1[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_addr2[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_addr3[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_seq[2];
./src/include/ieee80211.h:  u_int8_t    i_qos[2];
./src/include/ieee80211.h:  u_int8_t    i_qos[2];
./src/include/ieee80211.h:  u_int8_t    i_fc[2];
./src/include/ieee80211.h:  u_int8_t    i_dur[2];
./src/include/ieee80211.h:  u_int8_t    i_addr1[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_addr2[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_addr3[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_seq[2];
./src/include/ieee80211.h:  u_int8_t    i_addr4[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_fc[2];
./src/include/ieee80211.h:  u_int8_t    i_dur[2];
./src/include/ieee80211.h:  u_int8_t    i_addr1[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_addr2[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_addr3[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_seq[2];
./src/include/ieee80211.h:  u_int8_t    i_addr4[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_qos[2];
./src/include/ieee80211.h:  u_int8_t    wme_id;     /* IEEE80211_ELEMID_VENDOR */
./src/include/ieee80211.h:  u_int8_t    wme_len;    /* length in bytes */
./src/include/ieee80211.h:  u_int8_t    wme_oui[3]; /* 0x00, 0x50, 0xf2 */
./src/include/ieee80211.h:  u_int8_t    wme_type;   /* OUI type */
./src/include/ieee80211.h:  u_int8_t    wme_subtype;    /* OUI subtype */
./src/include/ieee80211.h:  u_int8_t    wme_version;    /* spec revision */
./src/include/ieee80211.h:  u_int8_t    wme_info;   /* QoS info */
./src/include/ieee80211.h:  u_int8_t    ts_id;
./src/include/ieee80211.h:  u_int8_t    ts_len;
./src/include/ieee80211.h:  u_int8_t    ts_oui[3];
./src/include/ieee80211.h:  u_int8_t    ts_oui_type;
./src/include/ieee80211.h:  u_int8_t    ts_oui_subtype;
./src/include/ieee80211.h:  u_int8_t    ts_version;
./src/include/ieee80211.h:  u_int8_t    ts_tsinfo[3];
./src/include/ieee80211.h:  u_int8_t    ts_nom_msdu[2];
./src/include/ieee80211.h:  u_int8_t    ts_max_msdu[2];
./src/include/ieee80211.h:  u_int8_t    ts_min_svc[4];
./src/include/ieee80211.h:  u_int8_t    ts_max_svc[4];
./src/include/ieee80211.h:  u_int8_t    ts_inactv_intv[4];
./src/include/ieee80211.h:  u_int8_t    ts_susp_intv[4];
./src/include/ieee80211.h:  u_int8_t    ts_start_svc[4];
./src/include/ieee80211.h:  u_int8_t    ts_min_rate[4];
./src/include/ieee80211.h:  u_int8_t    ts_mean_rate[4];
./src/include/ieee80211.h:  u_int8_t    ts_max_burst[4];
./src/include/ieee80211.h:  u_int8_t    ts_min_phy[4];
./src/include/ieee80211.h:  u_int8_t    ts_peak_rate[4];
./src/include/ieee80211.h:  u_int8_t    ts_delay[4];
./src/include/ieee80211.h:  u_int8_t    ts_surplus[2];
./src/include/ieee80211.h:  u_int8_t    ts_medium_time[2];
./src/include/ieee80211.h:  u_int8_t    acp_aci_aifsn;
./src/include/ieee80211.h:  u_int8_t    acp_logcwminmax;
./src/include/ieee80211.h:  u_int16_t   acp_txop;
./src/include/ieee80211.h:  u_int8_t    param_id;
./src/include/ieee80211.h:  u_int8_t    param_len;
./src/include/ieee80211.h:  u_int8_t    param_oui[3];
./src/include/ieee80211.h:  u_int8_t    param_oui_type;
./src/include/ieee80211.h:  u_int8_t    param_oui_sybtype;
./src/include/ieee80211.h:  u_int8_t    param_version;
./src/include/ieee80211.h:  u_int8_t    param_qosInfo;
./src/include/ieee80211.h:  u_int8_t    param_reserved;
./src/include/ieee80211.h:  u_int8_t    mnf_category;
./src/include/ieee80211.h:  u_int8_t    mnf_action;
./src/include/ieee80211.h:  u_int8_t    mnf_dialog;
./src/include/ieee80211.h:  u_int8_t    mnf_status;
./src/include/ieee80211.h:  u_int8_t    i_fc[2];
./src/include/ieee80211.h:  u_int8_t    i_dur[2];
./src/include/ieee80211.h:  u_int8_t    i_addr1[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_addr2[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_fc[2];
./src/include/ieee80211.h:  u_int8_t    i_dur[2];
./src/include/ieee80211.h:  u_int8_t    i_ra[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_ta[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_fc[2];
./src/include/ieee80211.h:  u_int8_t    i_dur[2];
./src/include/ieee80211.h:  u_int8_t    i_ra[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_fc[2];
./src/include/ieee80211.h:  u_int8_t    i_dur[2];
./src/include/ieee80211.h:  u_int8_t    i_ra[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_fc[2];
./src/include/ieee80211.h:  u_int8_t    i_aid[2];
./src/include/ieee80211.h:  u_int8_t    i_bssid[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_ta[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_fc[2];
./src/include/ieee80211.h:  u_int8_t    i_dur[2];   /* should be zero */
./src/include/ieee80211.h:  u_int8_t    i_ra[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:  u_int8_t    i_bssid[IEEE80211_ADDR_LEN];
./src/include/ieee80211.h:static __inline u_int16_t
./src/include/ieee80211.h:  const u_int8_t *frm;
./src/include/ieee80211.h:  return le16toh(*(const u_int16_t *)frm);
./src/include/ieee80211.h:typedef u_int8_t *ieee80211_mgt_beacon_t;
./src/include/ieee80211.h:  u_int8_t    wpa_id;     /* IEEE80211_ELEMID_VENDOR */
./src/include/ieee80211.h:  u_int8_t    wpa_len;    /* length in bytes */
./src/include/ieee80211.h:  u_int8_t    wpa_oui[3]; /* 0x00, 0x50, 0xf2 */
./src/include/ieee80211.h:  u_int8_t    wpa_type;   /* OUI type */
./src/include/ieee80211.h:  u_int16_t   wpa_version;    /* spec revision */
./src/include/ieee80211.h:  u_int32_t   wpa_mcipher[1]; /* multicast/group key cipher */
./src/include/ieee80211.h:  u_int16_t   wpa_uciphercnt; /* # pairwise key ciphers */
./src/include/ieee80211.h:  u_int32_t   wpa_uciphers[8];/* ciphers */
./src/include/ieee80211.h:  u_int16_t   wpa_authselcnt; /* authentication selector cnt*/
./src/include/ieee80211.h:  u_int32_t   wpa_authsels[8];/* selectors */
./src/include/ieee80211.h:  u_int16_t   wpa_caps;   /* 802.11i capabilities */
./src/include/ieee80211.h:  u_int16_t   wpa_pmkidcnt;   /* 802.11i pmkid count */
./src/include/ieee80211.h:  u_int16_t   wpa_pmkids[8];  /* 802.11i pmkids */
./src/include/ieee80211.h:  u_int8_t    tim_ie;         /* IEEE80211_ELEMID_TIM */
./src/include/ieee80211.h:  u_int8_t    tim_len;
./src/include/ieee80211.h:  u_int8_t    tim_count;      /* DTIM count */
./src/include/ieee80211.h:  u_int8_t    tim_period;     /* DTIM period */
./src/include/ieee80211.h:  u_int8_t    tim_bitctl;     /* bitmap control */
./src/include/ieee80211.h:  u_int8_t    tim_bitmap[1];      /* variable-length bitmap */
./src/include/ieee80211.h:  u_int8_t schan;         /* starting channel */
./src/include/ieee80211.h:  u_int8_t nchan;         /* number channels */
./src/include/ieee80211.h:  u_int8_t maxtxpwr;      /* tx power cap */
./src/include/ieee80211.h:  u_int8_t    ie;         /* IEEE80211_ELEMID_COUNTRY */
./src/include/ieee80211.h:  u_int8_t    len;
./src/include/ieee80211.h:  u_int8_t    cc[3];          /* ISO CC+(I)ndoor/(O)utdoor */
./src/include/ieee80211.h:typedef u_int8_t *ieee80211_mgt_auth_t;
./src/airbase-ng.c:    u_int64_t timestamp;
./src/airbase-ng.c:    u_int64_t timestamp;
./src/wesside-ng.c:     ws->ws_dfs.fs_wh.i_seq[0] = (u_int8_t)(seq >> 8);
./src/wesside-ng.c:     ws->ws_dfs.fs_wh.i_seq[1] = (u_int8_t)(seq % 256);
./src/osdep/darwin_tap.c:static int ti_set_mtu_darwin(struct tif *ti, int mtu) {
./src/osdep/openbsd_tap.c:static int ti_set_mtu_obsd(struct tif *ti, int mtu)
./src/osdep/linux_tap.c:static int ti_set_mtu_linux(struct tif *ti, int mtu)
./src/osdep/linux_tap.c:static int ti_get_mtu_linux(struct tif *ti)
./src/osdep/freebsd.c:mapgsm(u_int freq, u_int flags)
./src/osdep/freebsd.c:mappsb(u_int freq)
./src/osdep/freebsd.c:static u_int
./src/osdep/freebsd.c:ieee80211_mhz2ieee(u_int freq, u_int flags)
./src/osdep/airpcap.c:#define PPH_PH_VERSION        ((u_int8_t)0x00)
./src/osdep/airpcap.c:#define   PPI_FIELD_TYPE_802_11_COMMON        ((u_int16_t)0x02)
./src/osdep/airpcap.c:  u_int8_t    PphVersion;
./src/osdep/airpcap.c:  u_int8_t    PphFlags;
./src/osdep/airpcap.c:  u_int16_t   PphLength;
./src/osdep/airpcap.c:  u_int32_t   PphDlt;
./src/osdep/airpcap.c:  u_int16_t PfhType;
./src/osdep/airpcap.c:  u_int16_t PfhLength;
./src/osdep/airpcap.c:  u_int64_t   TsfTimer;
./src/osdep/airpcap.c:  u_int16_t   Flags;
./src/osdep/airpcap.c:  u_int16_t   Rate;
./src/osdep/airpcap.c:  u_int16_t   ChannelFrequency;
./src/osdep/airpcap.c:  u_int16_t   ChannelFlags;
./src/osdep/airpcap.c:  u_int8_t    FhssHopset;
./src/osdep/airpcap.c:  u_int8_t    FhssPattern;
./src/osdep/airpcap.c:int ppi_decode(const u_char *p, int caplen, int *hdrlen, int *power)
./src/osdep/netbsd_tap.c:static int ti_set_mtu_nbsd(struct tif *ti, int mtu)
./src/osdep/cygwin_tap.c:static int ti_set_mtu_cygwin(struct tif *ti, int mtu)
./src/osdep/freebsd_tap.c:static int ti_set_mtu_fbsd(struct tif *ti, int mtu)
./src/osdep/byteorder.h:    ((u_int16_t)( \
./src/osdep/byteorder.h:            (((u_int16_t)(x) & (u_int16_t)0x00ffU) << 8) | \
./src/osdep/byteorder.h:            (((u_int16_t)(x) & (u_int16_t)0xff00U) >> 8) ))
./src/osdep/byteorder.h:    ((u_int32_t)( \
./src/osdep/byteorder.h:            (((u_int32_t)(x) & (u_int32_t)0x000000ffUL) << 24) | \
./src/osdep/byteorder.h:            (((u_int32_t)(x) & (u_int32_t)0x0000ff00UL) <<  8) | \
./src/osdep/byteorder.h:            (((u_int32_t)(x) & (u_int32_t)0x00ff0000UL) >>  8) | \
./src/osdep/byteorder.h:            (((u_int32_t)(x) & (u_int32_t)0xff000000UL) >> 24) ))
./src/osdep/byteorder.h:    ((u_int64_t)( \
./src/osdep/byteorder.h:            (u_int64_t)(((u_int64_t)(x) & (u_int64_t)0x00000000000000ffULL) << 56) | \
./src/osdep/byteorder.h:            (u_int64_t)(((u_int64_t)(x) & (u_int64_t)0x000000000000ff00ULL) << 40) | \
./src/osdep/byteorder.h:            (u_int64_t)(((u_int64_t)(x) & (u_int64_t)0x0000000000ff0000ULL) << 24) | \
./src/osdep/byteorder.h:            (u_int64_t)(((u_int64_t)(x) & (u_int64_t)0x00000000ff000000ULL) <<  8) | \
./src/osdep/byteorder.h:            (u_int64_t)(((u_int64_t)(x) & (u_int64_t)0x000000ff00000000ULL) >>  8) | \
./src/osdep/byteorder.h:            (u_int64_t)(((u_int64_t)(x) & (u_int64_t)0x0000ff0000000000ULL) >> 24) | \
./src/osdep/byteorder.h:            (u_int64_t)(((u_int64_t)(x) & (u_int64_t)0x00ff000000000000ULL) >> 40) | \
./src/osdep/byteorder.h:            (u_int64_t)(((u_int64_t)(x) & (u_int64_t)0xff00000000000000ULL) >> 56) ))
./src/osdep/byteorder.h:            typedef uint64_t u_int64_t;
./src/osdep/byteorder.h:            typedef uint32_t u_int32_t;
./src/osdep/byteorder.h:            typedef uint16_t u_int16_t;
./src/osdep/byteorder.h:            typedef uint8_t  u_int8_t;
./src/osdep/byteorder.h:            #define __cpu_to_be64(x) (unsigned long long) OSSwapHostToBigInt64((uint64_t)x)
./src/osdep/byteorder.h:            #define __cpu_to_be32(x) (unsigned long) OSSwapHostToBigInt32((uint32_t)x)
./src/osdep/byteorder.h:            #define __cpu_to_be16(x) (unsigned short) OSSwapHostToBigInt16((uint16_t)x)
./src/osdep/byteorder.h:            #define __cpu_to_le64(x) (unsigned long long) OSSwapHostToLittleInt64((uint64_t)x)
./src/osdep/byteorder.h:            #define __cpu_to_le32(x) (unsigned long) OSSwapHostToLittleInt32((uint32_t)x)
./src/osdep/byteorder.h:            #define __cpu_to_le16(x) (unsigned short) OSSwapHostToLittleInt16((uint16_t)x)
./src/osdep/byteorder.h:        typedef uint64_t u_int64_t;
./src/osdep/byteorder.h:        typedef uint32_t u_int32_t;
./src/osdep/byteorder.h:        typedef uint16_t u_int16_t;
./src/osdep/byteorder.h:        typedef uint8_t  u_int8_t;
./src/osdep/linux.c:                ri->ri_mactime = *(u_int64_t*)( tmpbuf + 0x5C - 48 );
./src/easside-ng.c: u_int16_t capa;
./src/airodump-ng.h:    u_int maxsize_essid_seen;
./src/aircrack-ng.c:    int cpu_count, showhelp, z, zz, forceptw;
./src/aircrack-ng.c:                printf("Nb CPU detected: %d ", cpu_count);
./src/aircrack-ng.c:                    printf( "Invalid number of processes (recommended: %d)\n", cpu_count );
./contrib/airpcap/airpcap.c:#define PPH_PH_VERSION      ((u_int8_t)0x00)
./contrib/airpcap/airpcap.c:#define PPI_FIELD_TYPE_802_11_COMMON        ((u_int16_t)0x02)
./contrib/airpcap/airpcap.c:    u_int8_t    PphVersion;
./contrib/airpcap/airpcap.c:    u_int8_t    PphFlags;
./contrib/airpcap/airpcap.c:    u_int16_t   PphLength;
./contrib/airpcap/airpcap.c:    u_int32_t   PphDlt;
./contrib/airpcap/airpcap.c:    u_int16_t PfhType;
./contrib/airpcap/airpcap.c:    u_int16_t PfhLength;
./contrib/airpcap/airpcap.c:    u_int64_t   TsfTimer;
./contrib/airpcap/airpcap.c:    u_int16_t   Flags;
./contrib/airpcap/airpcap.c:    u_int16_t   Rate;
./contrib/airpcap/airpcap.c:    u_int16_t   ChannelFrequency;
./contrib/airpcap/airpcap.c:    u_int16_t   ChannelFlags;
./contrib/airpcap/airpcap.c:    u_int8_t    FhssHopset;
./contrib/airpcap/airpcap.c:    u_int8_t    FhssPattern;
./contrib/airpcap/airpcap.c:static int ppi_decode(const u_char *p, int caplen, int *hdrlen, int *power)
./src/include/ethernet.h:extern int  ether_ioctl(struct ifnet *, u_long, caddr_t);
./src/osdep/byteorder.h:            #define __cpu_to_be64(x) (unsigned long long) OSSwapHostToBigInt64((uint64_t)x)
./src/osdep/byteorder.h:            #define __cpu_to_be32(x) (unsigned long) OSSwapHostToBigInt32((uint32_t)x)
./src/osdep/byteorder.h:            #define __cpu_to_le64(x) (unsigned long long) OSSwapHostToLittleInt64((uint64_t)x)
./src/osdep/byteorder.h:            #define __cpu_to_le32(x) (unsigned long) OSSwapHostToLittleInt32((uint32_t)x)

latest version Aircrack-ng 1.2 rc4 have error of airodump-ng crashes with"illegal instruction"

I have been looking everywhere for this answer, I am having the issue. I can get airmon-ng start wlan0. I end up with the wlan0mon. Then when I airodump-ng wlan0mon it gives me the illegal instruction and freezes the terminal. I had it working this morning but during the day I did do an apt-get update, apt-get upgrade and since then it has been doing the above aircrack-ng updated to a newer version
Aircrack-ng 1.2 rc4 that not compatible with kali linux rolling edition

No valid WPA handshake in 1.2rc3/4

CM13 + Nethunter 3.0 + tplink 722n
All captured handshakes are empty (verified with wpaclean and aircrack-ng).
All was working fine on rc2.

besside-ng hops only on channels 1-11 instead of all of the available ones

It appears that by default in channel hopping mode besside-ng is hopping on channels 1-11 instead of 1-14 even if all of the channels are unlocked on the adapter:


pi@zero3:~ $ iw phy phy1 info | grep MHz
                        * 2412 MHz [1] (33.0 dBm)
                        * 2417 MHz [2] (33.0 dBm)
                        * 2422 MHz [3] (33.0 dBm)
                        * 2427 MHz [4] (33.0 dBm)
                        * 2432 MHz [5] (33.0 dBm)
                        * 2437 MHz [6] (33.0 dBm)
                        * 2442 MHz [7] (33.0 dBm)
                        * 2447 MHz [8] (33.0 dBm)
                        * 2452 MHz [9] (33.0 dBm)
                        * 2457 MHz [10] (33.0 dBm)
                        * 2462 MHz [11] (33.0 dBm)
                        * 2467 MHz [12] (33.0 dBm)
                        * 2472 MHz [13] (33.0 dBm)
                        * 2484 MHz [14] (33.0 dBm)
                 * short GI for 40 MHz
pi@zero3:~ $

If I specify any of the missing channels manually by using the -c parameter it's able to switch to those channels.
Is it possible to have it recognize the available channels to the adapter (like kismet does) instead of defaulting to 1-11?

Thank you.

[Airbase-NG] Segfaults for no reason?

after about 10min of capture airbase-ng will segfault

root@kali:~# dpkg -l | grep aircrack-ng
ii  aircrack-ng                            1:1.2-0~rc2-0kali5                   amd64        wireless WEP/WPA cracking utilities
23:46:10  Got directed probe request from 2C:27:D7:FA:CD:22 - "SocialNature"
23:46:10  Got directed probe request from 2C:27:D7:FA:CD:22 - "SocialNature"
23:46:10  Got directed probe request from 2C:27:D7:FA:CD:22 - "SocialNature"
23:46:11  Got directed probe request from D8:EB:97:D0:D9:EB - "tnwh.ca - 170b"
23:46:12  Got directed probe request from 2C:27:D7:FA:CD:22 - "SocialNature"

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffff6bfd700 (LWP 13634)]
__memcpy_ssse3 () at ../sysdeps/x86_64/multiarch/memcpy-ssse3.S:2649
2649    ../sysdeps/x86_64/multiarch/memcpy-ssse3.S: No such file or directory.
(gdb) bt full
#0  __memcpy_ssse3 () at ../sysdeps/x86_64/multiarch/memcpy-ssse3.S:2649
No locals.
#1  0x000055555555aed7 in ?? ()
No symbol table info available.
#2  0x00007ffff74c20a4 in start_thread (arg=0x7ffff6bfd700) at pthread_create.c:309
        __res = <optimized out>
        pd = 0x7ffff6bfd700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737333155584, -4176919623726318318, 1, 140737354125408, 140737488344688, 
                140737333155584, 4176935565019528466, 4176938174917197074}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 
              0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#3  0x00007ffff71f704d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
No locals.

Conn refused (pinger) in dcrack.py

Running "dcrack.py" just throws the error:

root@kali:~/Downloads# python dcrack.py 
Getting speed
('Speed', 1503)
('CID', 8573205185395703570L)
Conn refused (pinger)
Conn refused (pinger)

running as root (same errow when not root), internet connection works, system: Kali Linux, Python 2.7.9

add support for Npcap on Windows

Hi.

Thanks for creating the amazing aircrack-ng first!

I'm the author of Npcap, a fork of WinPcap but supports 802.11 packets capturing (e.g. using Wireshark). It's like Airpcap, but it doesn't need a USB hardware, Npcap just uses the stock wireless adapter to do its work. And more importantly it's free and open-source.

I noticed that aircrack-ng supports Airpcap. So is there any possibility to support Npcap as well?
Some info about 802.11 capturing is here:
https://github.com/nmap/npcap/releases/tag/v0.06-r15

Add a switch to disable/lower the frequency of printf's

printf's take a significant amount of time as compared to cracking operations, so it would be interesting to see if you would find any significant speedup if you only printed every 10,000th or 100,000th attempt, and none of the others.

awus036ach driver is not properly detected

┬─[root@pEmmZrkC:~]─[19:57:28]
╰─>$ airmon-ng

PHY Interface Driver Chipset

phy1 ap0 ath9k_htc Qualcomm Atheros Communications AR9271 802.11n
phy4 wlan0 ?????? Realtek Semiconductor Corp. RTL8812AU 802.11a/b/g/n/ac WLAN Adapter
phy2 wlan2mon ath9k_htc Qualcomm Atheros Communications TP-Link TL-WN322G v3 / TL-WN422G v2 802.11g [Atheros AR9271]
phy1 wlan6 ath9k_htc Qualcomm Atheros Communications AR9271 802.11n

┬─[root@pEmmZrkC:~]─[20:11:49]
╰─>$ airmon-ng start wlan0
PHY Interface Driver Chipset

phy1 ap0 ath9k_htc Qualcomm Atheros Communications AR9271 802.11n
phy4 wlan0 ?????? Realtek Semiconductor Corp. RTL8812AU 802.11a/b/g/n/ac WLAN Adapter
cat: /sys/class/ieee80211/phy4/device/net/wlan0mon/type: No existe el fichero o el directorio

Newly created monitor mode interface wlan0mon is NOT in monitor mode.
Removing non-monitor wlan0mon interface...
RTL8812AU driver with monitor mode and frame injection:https://github.com/astsam/rtl8812au

1.2-rc4 not compile

openwrt CC

In file included from linecount.cpp:62:0:
linecount.h:42:50: error: 'off_t' has not been declared
EXTERNC unsigned int linecount(const char file, off_t offset, size_t blksize);
^
linecount.cpp:94:42: error: 'off_t' has not been declared
unsigned int linecount(const char *file, off_t offset, size_t offsetmax) {
^
make[4]: *
* [linecount.o] Error 1

aireplay-ng sends packets but authentication fails

Hi,

I can't send packets with aireplay-ng, the packets show up in airodump-ng but things like --test or -1 do not work. Eg. I try "aireplay-ng -1 10", I see new clients in airodump-ng but the authentication fails at: Sending Authentication Request (Open System)

Packet dumps: airodump_caps.zip

Card Info:
148f:3072 Ralink Technology, Corp. RT3072 Wireless Adapter
https://wikidevi.com/wiki/Widemac_SL-3504N

[ 9093.491504] ieee80211 phy2: rt2x00_set_rt: Info - RT chipset 3071, rev 021c detected
[ 9093.519751] ieee80211 phy2: rt2x00_set_rf: Info - RF chipset 0008 detected
[ 9093.520105] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht'
[ 9295.143364] ieee80211 phy2: rt2x00lib_request_firmware: Info - Loading firmware file 'rt2870.bin'
[ 9295.143380] ieee80211 phy2: rt2x00lib_request_firmware: Info - Firmware detected - version: 0.29

System: Linux 4.4.3 x86_64

hostapd-wpe and with_ntdomain_hack

Hey,

While running hostapd-wpe I got a Windows client authenticating.

However asleap did not accept the challenge/response :

Could not recover last 2 bytes of hash from the
challenge/response. Sorry it didn't work out.

Thanks to https://www.nickmurison.me.uk/category/penetration-testing/, it looks like it comes from a FreeRADIUS option:

with_ntdomain_hack = yes

This issue was already raised on Twitter in 2015 : https://twitter.com/dot11_de/status/588994144565125120
So, is it possible to feed hostapd-wpe with this option or is it something to add?

Thanks :)

cannot compile with sqlite=true

Hello,

Not sure if I'm the only one, but I can no longer compile with "sqlite=true" flag.

Here is what I receive when attempting to compile:

redacted@redacted ~/github/aircrack-ng $ make sqlite=true
make -C src all
make[1]: Entering directory /home/redacted/github/aircrack-ng/src' gcc -g -W -Wall -O3 -D_FILE_OFFSET_BITS=64 -D_REVISION=0 -DHAVE_SQLITE -DCONFIG_LIBNL30 -DCONFIG_LIBNL -I/usr/include/libnl3 -fstack-protector -Wno-unused-but-set-variable -Wno-array-bounds -Iinclude -c -o airolib-ng.o airolib-ng.c gcc -g -W -Wall -O3 -D_FILE_OFFSET_BITS=64 -D_REVISION=0 -DHAVE_SQLITE -DCONFIG_LIBNL30 -DCONFIG_LIBNL -I/usr/include/libnl3 -fstack-protector -Wno-unused-but-set-variable -Wno-array-bounds -Iinclude airolib-ng.o crypto.o common.o -o airolib-ng -lssl -lcrypto -DHAVE_REGEXP -L/usr/local/lib -lsqlite3 /usr/bin/ld: /usr/local/lib/libcrypto.a(dso_dlfcn.o): undefined reference to symbol 'dlclose@@GLIBC_2.2.5' //lib/x86_64-linux-gnu/libdl.so.2: error adding symbols: DSO missing from command line collect2: error: ld returned 1 exit status make[1]: *** [airolib-ng] Error 1 make[1]: Leaving directory/home/redacted/github/aircrack-ng/src'
make: *** [all] Error 2
redacted@redacted ~/github/aircrack-ng $

I have installed all the prerequisites listed on the github page, however there isn't any package called "libsqlite3-devel" in my repos (linux mint). "libsqlite3-dev" works however.

this used to compile no problem in the past, just noticed this happening today.

Possible regression from rc3 (check fails when packaging)

Hi, i'm working on the packaging of the last release of aircrack-ng on debian and stumbled upon some strange thing, after some investigation i found out that kali is also suffering from this on their aircrack package and this started to happen on rc4, so this appears to affect any deb packaging of aircrack.

Part of the check routine from src/makefile is the command `./aircrack-ng -w ../test/password.lst -a 2 -e Harkonen -q ../test/wpa2.eapol.cap | grep 'KEY FOUND! [ 12345678 ]', the problem is that it only finds the key sometimes (this happens only when packaging), it's like if i run the above code 10 times, it will succeed on 5 and not find the key on the other 5 .

When manually compiling make sqlite=true experimental=true pcre=true this doesn't happen.

It's really hard to track down what's wrong and i'm wondering if rc4 introduced some change that broke the packaging in some strange way.

I thought it would be best to look for help with the people who develop aircrack, as someone might already have a hint on what may be wrong.

More info:
The compiling on the package is being done with the flags: gcrypt=true sqlite=true experimental=true pcre=true, i've tried some variations of flags and common.cfg but without result:
the common.cfg for amd64:

SSEFLAG=Y
NEWSSE=true
SIMDCORE=true
PTHREAD=Y

and for other architectures:

NEWSSE=false
SIMDCORE=false
PTHREAD=Y

Here's a gist with the build log https://gist.github.com/samueloph/18c3c7eaf44978320ed23fd450e9146f

Any comments that might help me discover the problem are highly appreciated.

-Note: The maintainer of aircrack on Kali already uploaded the new version but i think she didn't notice this problem yet, probably she got lucky when building the package (as it fails randomly).

airbase-ng multiple packets problem

Hi,

when using airbase, I get packets multiple times at at0. Eg. someone sends an DHCP request and I get that request 10-100 times on at0 and my dhcpd listening on at0 sends 10-100 answeres. I dumped the traffic with airodump and same there. If I use hostap everything is fine. I noticed that most of the packets are retransmits.

Wireshark PCAP file:
airodump.zip (My card is the one with the TP-Link MAC)

airbase

Card: Atheros AR9271 ath9k_htc/htc_9271-1.4.0.fw
System: Linux 4.4.3 x86_64

wpaclean

when I'm cleaning a 3 captures i get the following error:

Assertion failed: (rc >= 0), function file_read, file file.c, line 126.
Abort trap: 6

if i do them separately it seems to work fine.

The outdated option "band"

As I understand from the source file airodump-ng.c, the option band defines frequency, and not actually band. If it is not true, then the option is outdated with respect to N and AC standards.

I guess the description must be updated taking into account new standards.

International charset not recognized by airodump-ng

Hi guys,

I am using aircrack-ng 1.2-rc3 on Ubuntu Linux 16.04.
I noticed that when using airodump-ng it displays international charsets as bad/unknown characters (BF/EF/BD).

For example:
CH 2 ][ Elapsed: 6 s ][ 2017-02-27 10:00

BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID

8C:3A:E3:3F:DA:56 -28 8 3 1 11 54e WPA2 CCMP PSK �.�.�.�.?
B4:C7:99:59:E7:23 -32 10 0 0 1 54 . WPA2 CCMP PSK <length: 1>
B4:C7:99:59:E7:22 -34 9 0 0 1 54 . WPA2 CCMP PSK <length: 1>

It's supposed to be מההה? in Hebrew.
I did not find a solution in google or anyone mentioning this issue.

make error: ‘rc4test_amd64_sse2’ undeclared

Gentlemen,

i have an issue compiling the latest release on debian jessie. Anything i have missed?
Horst


gcc -g -W -Wall -O3 -msse2 -pthread -D_FILE_OFFSET_BITS=64 -D_REVISION=0 -DCONFIG_LIBNL30 -DCONFIG_LIBNL -I/usr/include/libnl3 -fstack-protector-strong -Wno-unused-but-set-variable -Wno-array-bounds -Iinclude -c -o aircrack-ptw-lib.o aircrack-ptw-lib.c
aircrack-ptw-lib.c: In function ‘PTW_computeKey’:
aircrack-ptw-lib.c:592:20: error: ‘rc4test_amd64_sse2’ undeclared (first use in this function)
state->rc4test = rc4test_amd64_sse2;
^
aircrack-ptw-lib.c:592:20: note: each undeclared identifier is reported only once for each function it appears in
: recipe for target 'aircrack-ptw-lib.o' failed
make[1]: *** [aircrack-ptw-lib.o] Error 1

IEEE oui.txt file is slow or impossible to download

Whenever I install aircrack-ng, I notice the oui.txt file from http://standards-oui.ieee.org/oui/oui.txt can take a long time to download, or even fail entirely.

From my local Charter connection:

$ time wget 'http://standards-oui.ieee.org/oui/oui.txt'
--2017-03-08 10:09:13--  http://standards-oui.ieee.org/oui/oui.txt
Resolving standards-oui.ieee.org (standards-oui.ieee.org)... 140.98.193.27
Connecting to standards-oui.ieee.org (standards-oui.ieee.org)|140.98.193.27|:80... connected.
HTTP request sent, awaiting response... Read error (Connection reset by peer) in headers.
Retrying.

--2017-03-08 10:16:06--  (try: 2)  http://standards-oui.ieee.org/oui/oui.txt
Connecting to standards-oui.ieee.org (standards-oui.ieee.org)|140.98.193.27|:80... connected.
HTTP request sent, awaiting response... 

From a fast Linode VPS:

# time curl 'http://standards-oui.ieee.org/oui/oui.txt' >/dev/null
real	2m26.495s
user	0m0.023s
sys	0m0.073s

Best case, this 3.5 megabyte file can download in 150 seconds, though commonly it fails to download entirely.

This isn't aircrack-ng's fault, but perhaps aircrack-ng could work around the IEEE issue.

linuxnet.ca has a sanitized (fixing teh typos and such) mirror of the oui.txt file they maintain in several versions (bz2, gzip, zip, plaintext) at this site: http://linuxnet.ca/ieee/oui/. The plaintext version is directly available at http://linuxnet.ca/ieee/oui.txt.

Perhaps you'd be willing to update airodump-ng-oui-update (https://github.com/aircrack-ng/aircrack-ng/blob/4d3d0ccaa4d67daa68f6fdbb6c13bf64debc6d27/scripts/airodump-ng-oui-update#L5) to point to this alternative URL? In my (admittedly limited) testing the typo-fixed version is an exact replacement.

Again from my local Charter connection:

$ time curl -s http://linuxnet.ca/ieee/oui.txt >/dev/null

real	0m5.870s
user	0m0.028s
sys	0m0.048s

$ time curl -s http://linuxnet.ca/ieee/oui.txt.bz2 | bzip2 -d >/dev/null

real	0m1.643s
user	0m0.172s
sys	0m0.012s

Ahh, much better.

airodump-ng's realtime output is row size related?

I add udp function to the dump_print() function is airodump-ng. I want to get the realtime result of the airodump-ng. So I need to run airodump-ng in background when startup. But I find that the airodump-ng is terminal windows size related. When the termial size(just row size) is smaller the the output, my server will not receive any udp datagram. What should I do to let airodump-ng run in background and not terminal size related.

airodump-ng ignores berlin option when writting to csv

airodump-ng -w wifi-dump --berlin 1 mon0

$ date
Thu 7 Apr 16:18:05 UTC 2016

$ cat wifi-dump-01.csv

.
.
.
Station MAC, First time seen, Last time seen, Power, # packets, BSSID, Probed ESSIDs
08:70:45:74:26:C6, 2016-04-07 16:02:28, 2016-04-07 16:12:01, -58,        3, (not associated) ,
00:80:48:7A:9F:D8, 2016-04-07 15:30:45, 2016-04-07 16:11:47, -48,      315, (not associated) , XXXX
00:80:48:7A:7E:43, 2016-04-07 16:04:06, 2016-04-07 16:04:06, -70,        1, (not associated) , XXXX
80:C5:E6:C3:55:64, 2016-04-07 15:54:03, 2016-04-07 16:03:39, -66,        7, (not associated) , XXXXX
BC:F5:AC:F5:5E:57, 2016-04-07 14:56:56, 2016-04-07 16:02:46, -56,      205, (not associated) ,
DC:F1:10:92:56:F8, 2016-04-07 16:01:30, 2016-04-07 16:01:30, -66,        1, (not associated) ,
90:00:DB:C4:C2:86, 2016-04-07 15:59:20, 2016-04-07 15:59:31, -50,        3, (not associated) ,
D0:22:BE:8B:60:68, 2016-04-07 15:55:22, 2016-04-07 15:58:45, -60,        5, (not associated) ,
C2:92:07:A8:A0:71, 2016-04-07 15:30:25, 2016-04-07 15:57:23, -66,       30, (not associated) ,

Possible bug in airudmp-ng, json_get_value_for_name

https://github.com/aircrack-ng/aircrack-ng/blob/master/src/airodump-ng.c#L4880

Lines 4878-4880 have the following:

to_find_len = strlen(name) + 3;
to_find = (char*) malloc(to_find_len);
snprintf(to_find, sizeof(to_find), "\"%s\"", name);

However, sizeof(to_find) is a static value of 4, not the size of the allocated buffer. This means that it will copy in no more than 4 bytes from the format string into to_find.

It is possible the intended call to snprintf should be the following:

snprintf(to_find, to_find_len, "\"%s\"", name);

airodump-ng

sometimes its run -1 like
CH 1 ][ Elapsed: 28 s ][ 2014-10-30 20:52 ][ fixed channel mon0: -1

BSSID PWR RXQ Beacons #Data, #/s CH MB ENC CIPHER AUTH E

2A:FB:D3:9A:DB:56 -30 100 274 7 0 1 54e WPA2 CCMP PSK X

BSSID STATION PWR Rate Lost Frames Probe

2A:FB:D3:9A:DB:56 80:56:F2:04:4F:7B 0 0e- 1e 0 10

cannot compile

Latest version from git: "last commit is: c91246e"

gcc -g -W -Wall -O3 -D_FILE_OFFSET_BITS=64 -D_REVISION=0  -DCONFIG_LIBNL30 -DCONFIG_LIBNL -I/usr/include/libnl3   -fstack-protector -Wno-unused-but-set-variable -Wno-array-bounds -fPIC -I..    -c -o linux.o linux.c
linux.c:1048:12: warning: ‘linux_set_channel’ defined but not used [-Wunused-function]
 static int linux_set_channel(struct wif *wi, int channel)
            ^
linux.c:2057:13: warning: ‘linux_close’ defined but not used [-Wunused-function]
 static void linux_close(struct wif *wi)

OSX Wireless tools not found

hi,when i execute "airmon-ng start en0",it says "Wireless tools not found",i searched in google,it says you can use airport instead,but i really want to know ,if i use airmon-ng, which wireless tools should i install on osx?

airbase-ng ignores --essid when -y set

When running airbase-ng with the -y flag set, the essid is default despite the presence of the --essid flag.

  • airbase-ng -e AP wlan0 creates the AP network
  • airbase-ng -e AP -y wlan0 creates the default network

Running 1.2 rc3

The besside-ng-crawler is not being compiled

I see in the Makefile for the src directory that it will be excluded if it is the Windows OS. However, I am attempting to create it on Ubuntu Linux. It will install the man page, but not the binary.

aireplay-ng ignoring APs in 5 GHz band

I am running into a problem where "aireplay-ng -9" is not seeing some APs in 5 GHz band.
These APs are visible when running airodump-ng.

Looking at the code of grab_essid, the first thing it does is look for a "DSSS Parameter Set" IE (IE ID, AKA tagtype, 3), and bails if it doesn't find it. So, any AP that doesn't include it in Beacon or Probe Response will be ignored.

However, by my reading of the standard, that IE is not required when using OFDM in the 5 GHz band. So this seems like a bug.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.